Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Connected Mobile Experiences User Enumeration Vulnerability
Vulnerability Description
A vulnerability in Cisco Connected Mobile Experiences (CMX) API authorizations could allow an authenticated, remote attacker to enumerate what users exist on the system. The vulnerability is due to a lack of authorization checks for certain API GET requests. An attacker could exploit this vulnerability by sending specific API GET requests to an affected device. A successful exploit could allow the attacker to enumerate users of the CMX system.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Vulnerability Type
授权机制不正确
Vulnerability Title
Cisco Connected Mobile Experiences (CMX) 访问控制错误漏洞
Vulnerability Description
Cisco Connected Mobile Experiences是美国思科（Cisco）公司的一个互联移动体验。 Cisco Connected Mobile Experiences (CMX) API 存在访问控制错误漏洞，该漏洞源允许经过身份验证的远程攻击者枚举系统上存在的用户。该漏洞是由于缺乏对某些API GET请求的授权检查。
CVSS Information
N/A
Vulnerability Type
N/A